Some email filtering statistics.
The NS email server, even if is placed in the DMZ of the Endian UTM, because of customer settings particularity (they use port 25 for desktop email client ==> port 25 is forwarded from WAN to DMZ for this server), makes own email filtering (Rspamd).
The other email servers I have in DMZ, are filtered by Endian UTM.
First statistic is from 06.11.2018 to 07.12.2018 (dd.mm.yyyy), second is from 07.12.2018 to 08.12.2018 (I have replaced the email server due hardware issues), and the others are from UTM.
And, of course, some Fail2Ban statistics.